flash(flex)crossdomain dtd规范

原创于 2013-12-27 13:38:27 发布 · 130 阅读

0 ·

本内容遵循CC 4.0 BY-SA版权协议

收录于

Flex

本文介绍了跨域策略文件(cross-domain-policy)的DTD文件结构与使用实例。详细阐述了不同元素及其属性的作用，如允许HTTP请求头设置等。

dtd文件位置:
[url]http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd[/url]

dtd内容:


<?xml version="1.0" encoding="ISO-8859-1"?>
<!-- Adobe DTD for cross-domain policy files -->
<!-- Copyright (c) 2008-2009, Adobe Systems Inc. -->

<!ELEMENT cross-domain-policy (site-control?,allow-access-from*,allow-http-request-headers-from*,allow-access-from-identity*)>

<!ELEMENT site-control EMPTY>
<!ATTLIST site-control permitted-cross-domain-policies (all|by-content-type|by-ftp-filename|master-only|none) #REQUIRED>

<!ELEMENT allow-access-from EMPTY>
<!ATTLIST allow-access-from domain CDATA #REQUIRED>
<!ATTLIST allow-access-from to-ports CDATA #IMPLIED>
<!ATTLIST allow-access-from secure (true|false) "true">

<!ELEMENT allow-http-request-headers-from EMPTY>
<!ATTLIST allow-http-request-headers-from domain CDATA #REQUIRED>
<!ATTLIST allow-http-request-headers-from headers CDATA #REQUIRED>
<!ATTLIST allow-http-request-headers-from secure (true|false) "true">

<!ELEMENT allow-access-from-identity (signatory)>

<!ELEMENT signatory (certificate)>

<!ELEMENT certificate EMPTY>
<!ATTLIST certificate fingerprint CDATA #REQUIRED>
<!ATTLIST certificate fingerprint-algorithm CDATA #REQUIRED>

<!-- End of file. -->

实例代码:


<?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE cross-domain-policy SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd">
<cross-domain-policy>
	<!--
	<site-control permitted-cross-domain-policies="master-only"/> 
	-->
	<allow-access-from domain="*" secure="false"/>
	<!-- flash播放器版本更新成9.0.124之后 -->
	<allow-http-request-headers-from domain="*" headers="*" secure="false"/>
</cross-domain-policy>

实例代码2:


<?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE cross-domain-policy SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd">
<cross-domain-policy>
  <site-control permitted-cross-domain-policies="all"/>
  <allow-http-request-headers-from domain="*" headers="*"/>
  <allow-access-from domain="*" to-ports="443,80,8080"/>
</cross-domain-policy>